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DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/11 
(Attachment 2) 


COMPUTER SECURITY 


The Security Committee with respect to computer security 
shall: 

1. Review, formulate and recommend to the Director 
of Central Intelligence policies, standards and procedures 
to protect intelligence data stored ‘in or processed 
by computers. 

2. Advise and assist the Hi vecter of Central Intelligence, 
Intelligence Community organizations, DCI committees and other 
intelligence users with respect to all computer security issues; 
and to resolve conflicts that may arise in connection therewith. 

3. Formulate and recommend to the Director of Central 
Intelligence resource programming objectives for Intelligence 
Community organizations in the field of computer security in 
-consideration of current and foreseen vulnerabilities and 
threats and with regard for the effective and efficient use 
of resources; and to recommend programs 


of computer security research and development. 
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4. Coordinate all aspects of Intelligence Community 
efforts in defense against hostile penetration of Community 
computer systems and as feasible to support other governmental © 
efforts aimed at improving computer security technology; to 
foster a coordinated program of Intelligence Community 
computer security training and indoctrination. 

5. Facilitate within the Intelligence Community the 
exchange of information relating to computer security threats, 
vulnerabilities and countermeasures by providing a focal 
point for: 

a. The evaluation of foreign intentions and 
capabilities to exploit Community computer operations; 

b. Central notification of exploitation attempts; 

c. The preparation of damage assessments of 
incidents of exploitation of intelligence computer 
operations; and 

d. The development of policy recommendations to 
the Director of Central Intelligence on the release of 
computer security information to foreign governments 
and international organizations. 

6. Review, formulate and recommend minimum computer 
security standards, procedures and criteria as guidance for 
system design, evaluation and certification of acceptable 


levels of security for computer systems. 
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DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/11 
(Attachment 3) 
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COMPARTMENTATION™ (U) 


The functions of the Security Committee as they relate 
to compartmentation controls are: (U) 


1. To develop and recommend to the Director of Central 
ee: a CE 


Intelligence, with the advice of the National Foreign Intel- 

Preoon aaa “ SECUR TY” 

ligence Board, guidance for the establishment, maintenance 
and improvement of coordinated compartmentation systems,which 
will: (U) 
a. Provide protection to sensitive intelligence 
: under the authority of Section 4-2 of Executive 
Order 12065. (U) 
| b. Ensure that special access programs bearing on 
intelligence sources and methods satisfy the requirements 
of section 4-202 of Executive Order 12065. (VU) 

c. Ensure control by the Director of Central 
Intelligence of the processes for access approvals to 
compartmented intelligence [and of the Séc 4te yw a 
procedures for dissemination, Sanitization or release 


of such intelligence, WO) ] 
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line term 'compartmentation" as used in this directive 25X14 


refers to the system whereby special access program controls 
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2. To formulate, coordinate, promulgate and maintainy, Ni yo" 
w 
guidance for use in the administration of compartmentation 


controls at all echelons of Intelligence Community organizations 


eS See 


(U) 


a. Access approval criteriaf . 25X1 
eo 


b. Physical security (U) 
c. Information identification, handling, 
accountability and destruction (WU) 

3. To review and survey with the cooperation and assistance 
of the National Foreign Intelligence Board principals concerned, 
the security standards, practices and procedures employed © 
by Intelligence Community organizations and their contractors 
in relation to approved compartmentation policies, procedures 
and controls; and to make recommendations for improvements 
to the National Foreign Intelligence Board principals concerned 


25X1 
through the Director of Central Intelligence. (U) 


4. To provide security advice and guidance 


indicating restricted handling within collection programs 


and their end products are applied to certain types of 
intelligence information and material. The term does not 


include Restricted Data as defined in Section II, Atomic 


Energy Act of 1954, as amended. (U) 
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5. To recommend security policies governing the release 
or disclosure of compartmented intelligence to foreign 
governments or international organizations in which the US 
Government participates, or being considered for release 
ae ete tne GS csdins YS 


to the public. (C) 
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